|
|
30.
|
|
|
The LDAP server application provides Directory Services functionality to Windows computers in a manner very similar to Microsoft Active Directory services. Such services include managing the identities and relationships of computers, users, and groups of computers or users that participate in the network, and providing a consistent means to describe, locate, and manage these resources. The freely available implementation of LDAP available for your Ubuntu system is called <emphasis role="italic">OpenLDAP</emphasis>. The server daemons responsible for handling OpenLDAP directory requests and the propagation of directory data from one LDAP server to another on Ubuntu, are <application>slapd</application> and <application>slurpd</application>. OpenLDAP may be used in conjunction with SAMBA to provide File, Print, and Directory services in much the same way a Windows Domain Controller does so long as SAMBA is compiled with LDAP support.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:136(para)
|
|
|
34.
|
|
|
security = ADS
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:167(emphasis)
|
|
|
40.
|
|
|
Computer Accounts are used in Directory Services to uniquely identify computer systems participating in a network, and are even treated in the same manner as users in terms of security. Computer accounts may have passwords just as user accounts do, and are subject to authorization to network resources in the same manner as user accounts. For example, if a network user, with a valid account for a particular network attempts to authenticate with a network resource from a computer which does not have a valid computer account, depending upon policies enforced on the network, the user may be denied access to the resource if the computer the user is attempting authentication from is considered to be an unauthorized computer.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:190(para)
|
|
|
41.
|
|
|
A computer account may be added to the SAMBA password file, provided the name of the computer being added exists as a valid user account in the local password database first. The syntax for adding a computer or machine account to the SAMBA password file is to use the <application>smbpasswd</application> command from a terminal prompt as follows:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:199(para)
|
|
|
45.
|
|
|
File Permissions define the explicit rights a computer or user has to a particular directory, file, or set of files. Such permissions may be defined by editing the <filename>/etc/samba/smb.conf</filename> file and specifying the explicit permissions of a defined file share. For example, if you have defined a SAMBA share called <emphasis role="italic">sourcedocs</emphasis> and wish to give <emphasis role="italic">read-only</emphasis> permissions to the group of users known as <emphasis role="italic">planning</emphasis>, but wanted to allow writing to the share by the group called <emphasis role="italic">authors</emphasis> and the user named <emphasis role="italic">richard</emphasis>, then you could edit the <filename>/etc/samba/smb.conf</filename> file, and add the following entries under the <emphasis role="italic">[sourcedocs]</emphasis> entry:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:217(para)
|
|
|
49.
|
|
|
Another possible permission is to declare <emphasis role="italic">administrative</emphasis> permissions to a particular shared resource. Users having administrative permissions may read, write, or modify any information contained in the resource the user has been given explicit administrative permissions to. For example, if you wanted to give the user <emphasis role="italic">melissa</emphasis> administrative permissions to the example <emphasis role="italic">sourcedocs</emphasis> share, you would edit the <filename>/etc/samba/smb.conf</filename> file, and add the following line under the <emphasis role="italic">[sourcedocs]</emphasis> entry:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:235(para)
|
|
|
50.
|
|
|
admin users = melissa
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:242(emphasis)
|
|
|
52.
|
|
|
Ubuntu includes client applications and capabilities for accessing network resources shared with the SMB protocol. For example, a utility called <application>smbclient</application> allows for accessing remote shared file-systems, in a manner similar to a File Transfer Protocol (FTP) client. To access a shared folder resource known as <emphasis role="italic">documents</emphasis> offered by a remote Windows computer named <emphasis role="italic">bill</emphasis> using <application>smbclient</application> for example, one would enter a command similar to the following at the prompt:
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../generic/serverguide/C/windows-networking.xml:251(para)
|
|
|
54.
|
|
|
You will then be prompted for the password for the user name specified after the -U switch, and upon successful authentication, will be presented with a prompt where commands may be entered for manipulating and transferring files in a syntax similar to that used by non-graphical FTP clients. For more information on the <application>smbclient</application> utility, read the utility's manual page with the command: <screen> 
<command>man smbclient</command>
</screen> |
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
|
(no translation yet)
|
|
|
|
|
55.
|
|
|
Local mounting of remote network resources using the SMB protocol is also possible using the <application>smbfs</application> program.
|
|
|
|
|
(no translation yet)
|
|
|
